@univerjs-pro/edit-history-loader
UniverSheet edit history loader
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require in obfuscated CJS bundle; module-loader artifact, no hostile target. | ai | |
| phantom-deps | phantom-dep:@univerjs/icons | AI (phantom-deps): Config-referenced first-party dep; stable false positive. | ai | |
| phantom-deps | phantom-dep:@univerjs/protocol | AI (phantom-deps): Config-referenced first-party dep; stable false positive. | ai | |
| semgrep | semgrep:obfuscation-while-true | AI (semgrep): javascript-obfuscator output in a commercial @univerjs-pro dist bundle; no malicious behavior, stable across versions. | ai | |
| semgrep | semgrep:obfuscation-hex-functions | AI (semgrep): Hex identifiers are the same obfuscator output; benign source-protection for this pro package. | ai |
Versions (showing 10 of 10)
| Version | Deps | Published |
|---|---|---|
| 0.21.1 | 41 / 4 | |
| 0.4.2 | 32 / 7 | |
| 0.2.12 | 2 / 34 | |
| 0.2.11 | 2 / 34 | |
| 0.2.10 | 2 / 34 | |
| 0.2.9 | 2 / 34 | |
| 0.2.8 | 2 / 34 | |
| 0.2.7 | 2 / 18 | |
| 0.2.6 | 2 / 21 | |
| 0.2.5 | 2 / 21 |
v0.4.2
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x3c6350=_0x2fa3;(function(_0x25b51c,_0x52ee6c){var _0x277f74=_0x2fa3,_0x28f509=_0x25b51c();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3c6350=_0x2fa3;(function(_0x25b51c,_0x52ee6c){var _0x277f74=_0x2fa3,_0x28f509=_0x25b51c();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3c6350=_0x2fa3;(function(_0x25b51c,_0x52ee6c){var _0x277f74=_0x2fa3,_0x28f509=_0x25b51c();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x228491=_0x2a50;(function(_0x14f9e0,_0x2fd5d2){var _0x4d0c8d=_0x2a50,_0xe2ea89=_0x14f9e0();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x228491=_0x2a50;(function(_0x14f9e0,_0x2fd5d2){var _0x4d0c8d=_0x2a50,_0xe2ea89=_0x14f9e0();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x228491=_0x2a50;(function(_0x14f9e0,_0x2fd5d2){var _0x4d0c8d=_0x2a50,_0xe2ea89=_0x14f9e0();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18b0(_0x151081,_0x3ffbe7){var _0x5cb68d=_0x5cb6();return _0x18b0=function(_0x18b057,_0x17f6ec){_0x18b057=_0x
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.12
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x146ce8=_0x45ac;(function(_0x46a8f9,_0x28cf8d){var _0x34437f=_0x45ac,_0x42b6b9=_0x46a8f9();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x146ce8=_0x45ac;(function(_0x46a8f9,_0x28cf8d){var _0x34437f=_0x45ac,_0x42b6b9=_0x46a8f9();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x146ce8=_0x45ac;(function(_0x46a8f9,_0x28cf8d){var _0x34437f=_0x45ac,_0x42b6b9=_0x46a8f9();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x52afce=_0x881b;(function(_0x4fff69,_0x47dcf8){var _0x58ddb0=_0x881b,_0x2e2101=_0x4fff69();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x52afce=_0x881b;(function(_0x4fff69,_0x47dcf8){var _0x58ddb0=_0x881b,_0x2e2101=_0x4fff69();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x52afce=_0x881b;(function(_0x4fff69,_0x47dcf8){var _0x58ddb0=_0x881b,_0x2e2101=_0x4fff69();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x3b48(_0x3b1232,_0x12e10b){var _0x4e3a0b=_0x4e3a();return _0x3b48=function(_0x3b483d,_0x3968b4){_0x3b483d=_0x
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.11
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0xeae0fb=_0x1c57;(function(_0x40d2a2,_0x3b9269){var _0x48914f=_0x1c57,_0x5c0223=_0x40d2a2();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0xeae0fb=_0x1c57;(function(_0x40d2a2,_0x3b9269){var _0x48914f=_0x1c57,_0x5c0223=_0x40d2a2();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0xeae0fb=_0x1c57;(function(_0x40d2a2,_0x3b9269){var _0x48914f=_0x1c57,_0x5c0223=_0x40d2a2();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4a3310=_0x30a3;(function(_0xce8d90,_0x3eaca2){var _0x5d3557=_0x30a3,_0xbe2262=_0xce8d90();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4a3310=_0x30a3;(function(_0xce8d90,_0x3eaca2){var _0x5d3557=_0x30a3,_0xbe2262=_0xce8d90();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4a3310=_0x30a3;(function(_0xce8d90,_0x3eaca2){var _0x5d3557=_0x30a3,_0xbe2262=_0xce8d90();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x4fb6(_0x43d1a4,_0x1953f7){var _0x53ecfa=_0x53ec();return _0x4fb6=function(_0x4fb641,_0x3a97ac){_0x4fb641=_0x
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.10
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x381462=_0x3b29;(function(_0x4e057b,_0xadcd30){var _0xcb6518=_0x3b29,_0x3c4b7b=_0x4e057b();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x381462=_0x3b29;(function(_0x4e057b,_0xadcd30){var _0xcb6518=_0x3b29,_0x3c4b7b=_0x4e057b();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x381462=_0x3b29;(function(_0x4e057b,_0xadcd30){var _0xcb6518=_0x3b29,_0x3c4b7b=_0x4e057b();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0xf148d4=_0x2fdb;(function(_0x6540aa,_0x424d22){var _0x399b8d=_0x2fdb,_0x55d83d=_0x6540aa();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xf148d4=_0x2fdb;(function(_0x6540aa,_0x424d22){var _0x399b8d=_0x2fdb,_0x55d83d=_0x6540aa();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xf148d4=_0x2fdb;(function(_0x6540aa,_0x424d22){var _0x399b8d=_0x2fdb,_0x55d83d=_0x6540aa();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x2d50(){var _0x2bcd4a=['triggerLoadVersions','HistoryLoaderService','MenuPosition','trim','@univerjs/drawing-
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.9
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x540066=_0x34b6;(function(_0x277117,_0x2ffba1){var _0x420f6e=_0x34b6,_0x44f74a=_0x277117();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x540066=_0x34b6;(function(_0x277117,_0x2ffba1){var _0x420f6e=_0x34b6,_0x44f74a=_0x277117();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x540066=_0x34b6;(function(_0x277117,_0x2ffba1){var _0x420f6e=_0x34b6,_0x44f74a=_0x277117();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x1226e1=_0x571f;(function(_0x14a49a,_0x10940b){var _0x4042cb=_0x571f,_0x53e5f9=_0x14a49a();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x1226e1=_0x571f;(function(_0x14a49a,_0x10940b){var _0x4042cb=_0x571f,_0x53e5f9=_0x14a49a();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x1226e1=_0x571f;(function(_0x14a49a,_0x10940b){var _0x4042cb=_0x571f,_0x53e5f9=_0x14a49a();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x32ce(_0xb3d694,_0x1b14a){var _0xb9aeec=_0xb9ae();return _0x32ce=function(_0x32ce87,_0x1d4404){_0x32ce87=_0x3
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.8
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x5c5fd0=_0x9207;(function(_0x558864,_0x2f996c){var _0x5f345f=_0x9207,_0x44cd7c=_0x558864();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x5c5fd0=_0x9207;(function(_0x558864,_0x2f996c){var _0x5f345f=_0x9207,_0x44cd7c=_0x558864();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x5c5fd0=_0x9207;(function(_0x558864,_0x2f996c){var _0x5f345f=_0x9207,_0x44cd7c=_0x558864();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x279961=_0x1ebd;(function(_0x6806ad,_0x5ac1af){var _0x2aae6a=_0x1ebd,_0x17d0a9=_0x6806ad();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x279961=_0x1ebd;(function(_0x6806ad,_0x5ac1af){var _0x2aae6a=_0x1ebd,_0x17d0a9=_0x6806ad();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x279961=_0x1ebd;(function(_0x6806ad,_0x5ac1af){var _0x2aae6a=_0x1ebd,_0x17d0a9=_0x6806ad();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | (function(_0x4c5807,_0x4c21ce){var _0x465687=_0x24ff,_0x480354=_0x4c5807();while(!![]){try{var _0x4602a7=-parseInt(_0x46
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.7
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x3b0f6a=_0x5d0a;(function(_0x24ef87,_0x1d50eb){var _0x1a1480=_0x5d0a,_0x1deee5=_0x24ef87();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3b0f6a=_0x5d0a;(function(_0x24ef87,_0x1d50eb){var _0x1a1480=_0x5d0a,_0x1deee5=_0x24ef87();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3b0f6a=_0x5d0a;(function(_0x24ef87,_0x1d50eb){var _0x1a1480=_0x5d0a,_0x1deee5=_0x24ef87();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0xd21a48=_0x3c61;(function(_0x59d7b3,_0x382e04){var _0x316b48=_0x3c61,_0x4b6b5c=_0x59d7b3();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xd21a48=_0x3c61;(function(_0x59d7b3,_0x382e04){var _0x316b48=_0x3c61,_0x4b6b5c=_0x59d7b3();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0xd21a48=_0x3c61;(function(_0x59d7b3,_0x382e04){var _0x316b48=_0x3c61,_0x4b6b5c=_0x59d7b3();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x47af(){var _0x5a5f42=['current','exhaustSavingTask','RxDisposable','UniverSheetsHyperLinkPlugin','Collaborat
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.6
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x3335f7=_0x5d7f;(function(_0xaf6a4c,_0x52ad7c){var _0x2d8b6d=_0x5d7f,_0x327bf1=_0xaf6a4c();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3335f7=_0x5d7f;(function(_0xaf6a4c,_0x52ad7c){var _0x2d8b6d=_0x5d7f,_0x327bf1=_0xaf6a4c();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x3335f7=_0x5d7f;(function(_0xaf6a4c,_0x52ad7c){var _0x2d8b6d=_0x5d7f,_0x327bf1=_0xaf6a4c();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x1c916f=_0xe976;(function(_0x42587d,_0x1553fb){var _0x363af4=_0xe976,_0x15d472=_0x42587d();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x1c916f=_0xe976;(function(_0x42587d,_0x1553fb){var _0x363af4=_0xe976,_0x15d472=_0x42587d();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x1c916f=_0xe976;(function(_0x42587d,_0x1553fb){var _0x363af4=_0xe976,_0x15d472=_0x42587d();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x18ac(_0x53fe40,_0xdb24){var _0x2ad3db=_0x2ad3();return _0x18ac=function(_0x18ac35,_0x3ccb43){_0x18ac35=_0x18
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.2.5
15 findings[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | 'use strict';var _0x311b4b=_0x38ae;(function(_0x35db9e,_0x15ee18){var _0x2777f3=_0x38ae,_0x2733bf=_0x35db9e();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x311b4b=_0x38ae;(function(_0x35db9e,_0x15ee18){var _0x2777f3=_0x38ae,_0x2733bf=_0x35db9e();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | 'use strict';var _0x311b4b=_0x38ae;(function(_0x35db9e,_0x15ee18){var _0x2777f3=_0x38ae,_0x2733bf=_0x35db9e();while(!![]
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | var _0x4432cb=_0x4e83;(function(_0x32bf29,_0x5990c8){var _0x25071e=_0x4e83,_0xbc2bd5=_0x32bf29();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4432cb=_0x4e83;(function(_0x32bf29,_0x5990c8){var _0x25071e=_0x4e83,_0xbc2bd5=_0x32bf29();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | var _0x4432cb=_0x4e83;(function(_0x32bf29,_0x5990c8){var _0x25071e=_0x4e83,_0xbc2bd5=_0x32bf29();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): javascript-obfuscator output in production CJS bundle is not expected for this package type.) while(!![]) loop is a signature of javascript-obfuscator output > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed obfuscated identifiers confirm javascript-obfuscator usage in the distributed bundle.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator > 1 | function _0x5a79(){var _0x19a79=['UniverSheetsNumfmtPlugin','univer-history-container','40051yDgNxJ','entries','react','
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.